Privacy Policy
This is a working draft describing how Board Meetings actually handles data today. It is not a substitute for review by your own counsel before you rely on it.
What we collect
When you create an account, we collect your email address and authentication details. When you or your organization use the service, we store the data you enter: organization and member information, roles, meetings, agendas, minutes, motions, votes, and action items. This data belongs to your organization and is kept isolated from every other organization on the platform.
Why we collect it
We use this data solely to operate the service: authenticating you, scoping your access to your own organization's records, running billing for your subscription, sending the emails you or your organization ask for (invitations, action-item digests), and generating documents you request (such as exported minutes).
Who we share it with
We rely on a small number of subprocessors to run the service:
- Supabase -- database, authentication, and file storage
- Stripe -- subscription billing
- Resend -- transactional email delivery
- Netlify -- application hosting and scheduled jobs
We do not sell your data, and we do not share it with anyone else except as required by law.
How it's protected
Every table in our database enforces row-level security so that an organization's data is only ever visible to its own active members. All traffic is encrypted in transit. Access by our own support staff is limited, function-gated, and itself logged to an append-only audit record.
Your rights
You can request a copy of your personal data, or your organization's data if you founded it, at any time. Deleting an organization takes effect immediately (the organization becomes read-only) and the underlying data is permanently removed after a 30-day retention window, giving you time to change your mind.
Contact
Questions about this policy can be sent to the organization that operates this Board Meetings instance.